Panorama GUI doesn't show the iptags created through xmlapi

Panorama GUI doesn't show the iptags created through xmlapi

2203
Created On 03/02/23 02:49 AM - Last Modified 03/28/25 23:52 PM


Symptom


  • Tag's created using the XML/REST API, which are registered in DAG (Dynamic Address Group) in panorama
  • These objects are not seen in the object group in panorama GUI (GUI: Device group > Objects > Address group).
image.png
 
 

Environment


  • Panorama M-500
  • PAN-OS 10.x
  • Dynamic Address Group with Tags

Cause


  • User Interface (UI) request is handled by configd in the Panorama and useridd / devsrvr on the Firewalls.
  • On the Panorama, configd doesn't have visibility into the iptags learned by useridd through xmlapi and therefore the UI doesn't show the iptags.

Resolution


  1. Use the CLI command "show object registered-ip all" to view the tags associated with DAGs.
  2. Enter the tag Manually (instead of adding through XML/REST API) for the Dynamic Address Group and push that to the firewalls in a security policy.

Additional Information
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sazSCAQ&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language